必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Beijing

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): Beijing Baidu Netcom Science and Technology Co., Ltd.

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attackspambots
Dec 18 08:05:14 OPSO sshd\[30967\]: Invalid user borys from 106.13.48.157 port 38296
Dec 18 08:05:14 OPSO sshd\[30967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Dec 18 08:05:16 OPSO sshd\[30967\]: Failed password for invalid user borys from 106.13.48.157 port 38296 ssh2
Dec 18 08:12:08 OPSO sshd\[31864\]: Invalid user gpkaff from 106.13.48.157 port 35924
Dec 18 08:12:08 OPSO sshd\[31864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-12-18 17:54:01
attackbotsspam
Dec  9 07:25:04 eventyay sshd[21089]: Failed password for root from 106.13.48.157 port 37374 ssh2
Dec  9 07:31:54 eventyay sshd[21312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Dec  9 07:31:55 eventyay sshd[21312]: Failed password for invalid user hostname from 106.13.48.157 port 34940 ssh2
...
2019-12-09 15:29:26
attackbots
2019-12-08T09:02:45.056673abusebot.cloudsearch.cf sshd\[17845\]: Invalid user yatish from 106.13.48.157 port 55188
2019-12-08 17:18:10
attackbotsspam
Dec  4 22:10:14 server sshd\[17057\]: Invalid user piccarreta from 106.13.48.157
Dec  4 22:10:14 server sshd\[17057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Dec  4 22:10:17 server sshd\[17057\]: Failed password for invalid user piccarreta from 106.13.48.157 port 39774 ssh2
Dec  4 22:25:32 server sshd\[21352\]: Invalid user committe from 106.13.48.157
Dec  4 22:25:32 server sshd\[21352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
...
2019-12-05 06:10:33
attack
Oct 29 10:01:04 vps691689 sshd[18401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Oct 29 10:01:06 vps691689 sshd[18401]: Failed password for invalid user china from 106.13.48.157 port 49624 ssh2
...
2019-10-29 17:08:56
attack
Oct 28 22:05:01 MK-Soft-VM6 sshd[3583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Oct 28 22:05:03 MK-Soft-VM6 sshd[3583]: Failed password for invalid user cn from 106.13.48.157 port 52056 ssh2
...
2019-10-29 05:29:22
attackbotsspam
Invalid user wu from 106.13.48.157 port 53504
2019-10-27 03:18:47
attack
Invalid user wu from 106.13.48.157 port 53504
2019-10-24 21:28:48
attackbotsspam
Oct 21 15:36:43 sauna sshd[112130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Oct 21 15:36:45 sauna sshd[112130]: Failed password for invalid user BGT%VFR$ from 106.13.48.157 port 33558 ssh2
...
2019-10-21 21:16:36
attack
Oct 20 14:30:52 meumeu sshd[30010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Oct 20 14:30:54 meumeu sshd[30010]: Failed password for invalid user eoffice from 106.13.48.157 port 34200 ssh2
Oct 20 14:36:38 meumeu sshd[30752]: Failed password for root from 106.13.48.157 port 42850 ssh2
...
2019-10-20 22:15:46
attackbotsspam
Oct 13 00:23:05 debian64 sshd\[21301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157  user=root
Oct 13 00:23:08 debian64 sshd\[21301\]: Failed password for root from 106.13.48.157 port 48800 ssh2
Oct 13 00:29:22 debian64 sshd\[22530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157  user=root
...
2019-10-13 07:16:03
attack
2019-09-29T14:43:38.6818931495-001 sshd\[35312\]: Invalid user corky from 106.13.48.157 port 42094
2019-09-29T14:43:38.6853131495-001 sshd\[35312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-29T14:43:40.7519851495-001 sshd\[35312\]: Failed password for invalid user corky from 106.13.48.157 port 42094 ssh2
2019-09-29T14:48:08.5873341495-001 sshd\[35661\]: Invalid user 123456 from 106.13.48.157 port 52150
2019-09-29T14:48:08.5949861495-001 sshd\[35661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-29T14:48:10.7273751495-001 sshd\[35661\]: Failed password for invalid user 123456 from 106.13.48.157 port 52150 ssh2
...
2019-09-30 03:03:15
attack
Sep 28 23:11:13 hpm sshd\[23216\]: Invalid user 123 from 106.13.48.157
Sep 28 23:11:13 hpm sshd\[23216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 28 23:11:15 hpm sshd\[23216\]: Failed password for invalid user 123 from 106.13.48.157 port 50494 ssh2
Sep 28 23:16:45 hpm sshd\[23616\]: Invalid user Dmin from 106.13.48.157
Sep 28 23:16:45 hpm sshd\[23616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-29 17:24:28
attackspambots
Sep 26 08:41:26 ny01 sshd[15720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 26 08:41:28 ny01 sshd[15720]: Failed password for invalid user Ruut from 106.13.48.157 port 35948 ssh2
Sep 26 08:47:26 ny01 sshd[17038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-26 20:53:46
attackspam
Sep 23 20:24:43 v22019058497090703 sshd[19486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 23 20:24:45 v22019058497090703 sshd[19486]: Failed password for invalid user transfer from 106.13.48.157 port 54588 ssh2
Sep 23 20:29:55 v22019058497090703 sshd[19892]: Failed password for root from 106.13.48.157 port 38938 ssh2
...
2019-09-24 02:59:28
attackspambots
2019-09-22T08:10:42.233166  sshd[27254]: Invalid user cc@123 from 106.13.48.157 port 60846
2019-09-22T08:10:42.246827  sshd[27254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-22T08:10:42.233166  sshd[27254]: Invalid user cc@123 from 106.13.48.157 port 60846
2019-09-22T08:10:44.594509  sshd[27254]: Failed password for invalid user cc@123 from 106.13.48.157 port 60846 ssh2
2019-09-22T08:16:52.100638  sshd[27359]: Invalid user mickey1 from 106.13.48.157 port 44230
...
2019-09-22 15:22:24
attackspambots
SSH-BruteForce
2019-09-21 08:48:52
attack
Sep 14 08:37:23 meumeu sshd[8436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Sep 14 08:37:26 meumeu sshd[8436]: Failed password for invalid user team1 from 106.13.48.157 port 34022 ssh2
Sep 14 08:43:51 meumeu sshd[9267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
...
2019-09-15 00:49:40
attack
Sep 14 02:42:54 www sshd\[18187\]: Invalid user sysop from 106.13.48.157
Sep 14 02:42:54 www sshd\[18187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 14 02:42:56 www sshd\[18187\]: Failed password for invalid user sysop from 106.13.48.157 port 35978 ssh2
...
2019-09-14 07:46:26
attackspambots
Sep  9 06:41:27 saschabauer sshd[2067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep  9 06:41:29 saschabauer sshd[2067]: Failed password for invalid user password from 106.13.48.157 port 35490 ssh2
2019-09-09 12:48:32
attackbotsspam
Sep  6 07:45:34 vps691689 sshd[8961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep  6 07:45:35 vps691689 sshd[8961]: Failed password for invalid user 123 from 106.13.48.157 port 51216 ssh2
...
2019-09-06 14:02:43
attackspambots
Sep  3 02:29:39 lnxmysql61 sshd[22374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-03 09:13:04
attackbots
2019-08-24T18:32:20.826342  sshd[2297]: Invalid user elisabetta from 106.13.48.157 port 48754
2019-08-24T18:32:20.840580  sshd[2297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-08-24T18:32:20.826342  sshd[2297]: Invalid user elisabetta from 106.13.48.157 port 48754
2019-08-24T18:32:22.978895  sshd[2297]: Failed password for invalid user elisabetta from 106.13.48.157 port 48754 ssh2
2019-08-24T18:58:39.961232  sshd[2634]: Invalid user cathyreis from 106.13.48.157 port 37732
...
2019-08-25 01:48:23
attackbotsspam
Aug 21 15:45:40 v22019058497090703 sshd[17609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Aug 21 15:45:42 v22019058497090703 sshd[17609]: Failed password for invalid user cod4server from 106.13.48.157 port 37634 ssh2
Aug 21 15:52:20 v22019058497090703 sshd[18018]: Failed password for root from 106.13.48.157 port 50186 ssh2
...
2019-08-22 04:16:36
attackspambots
$f2bV_matches
2019-08-14 04:19:45
attackspambots
Aug  3 20:25:20 localhost sshd\[40325\]: Invalid user copy from 106.13.48.157 port 59242
Aug  3 20:25:20 localhost sshd\[40325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
...
2019-08-04 03:33:06
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.48.9 attackbotsspam
Oct 8 21:59:31 *hidden* sshd[4418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.9 Oct 8 21:59:33 *hidden* sshd[4418]: Failed password for invalid user kevin from 106.13.48.9 port 40514 ssh2 Oct 8 22:16:27 *hidden* sshd[11400]: Invalid user info from 106.13.48.9 port 38028
2020-10-10 04:46:19
106.13.48.9 attack
SSH bruteforce
2020-10-09 20:45:22
106.13.48.9 attackspam
2020-10-09T04:48:40+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)
2020-10-09 12:31:36
106.13.48.122 attack
firewall-block, port(s): 14602/tcp
2020-09-06 20:34:34
106.13.48.122 attackspam
 TCP (SYN) 106.13.48.122:47133 -> port 27055, len 44
2020-09-06 12:14:05
106.13.48.122 attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-06 04:36:40
106.13.48.122 attack
Aug 11 22:32:14 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122  user=root
Aug 11 22:32:16 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: Failed password for root from 106.13.48.122 port 42005 ssh2
Aug 11 22:35:19 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122  user=root
Aug 11 22:35:21 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: Failed password for root from 106.13.48.122 port 61109 ssh2
Aug 11 22:36:39 Ubuntu-1404-trusty-64-minimal sshd\[14851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122  user=root
2020-08-12 05:44:27
106.13.48.122 attack
Unauthorized connection attempt detected from IP address 106.13.48.122 to port 8812
2020-07-25 16:06:07
106.13.48.122 attack
Unauthorized connection attempt detected from IP address 106.13.48.122 to port 768 [T]
2020-07-08 02:06:02
106.13.48.122 attackbots
Jul  6 16:56:18 ift sshd\[32718\]: Invalid user zxc from 106.13.48.122Jul  6 16:56:19 ift sshd\[32718\]: Failed password for invalid user zxc from 106.13.48.122 port 29093 ssh2Jul  6 16:59:16 ift sshd\[33111\]: Failed password for invalid user admin from 106.13.48.122 port 50249 ssh2Jul  6 17:02:02 ift sshd\[34103\]: Invalid user zhangfeng from 106.13.48.122Jul  6 17:02:04 ift sshd\[34103\]: Failed password for invalid user zhangfeng from 106.13.48.122 port 14912 ssh2
...
2020-07-07 01:17:17
106.13.48.122 attackspam
Jul  5 05:48:37 meumeu sshd[538171]: Invalid user wor from 106.13.48.122 port 40808
Jul  5 05:48:37 meumeu sshd[538171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 
Jul  5 05:48:37 meumeu sshd[538171]: Invalid user wor from 106.13.48.122 port 40808
Jul  5 05:48:39 meumeu sshd[538171]: Failed password for invalid user wor from 106.13.48.122 port 40808 ssh2
Jul  5 05:54:07 meumeu sshd[538299]: Invalid user cloud from 106.13.48.122 port 25505
Jul  5 05:54:07 meumeu sshd[538299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 
Jul  5 05:54:07 meumeu sshd[538299]: Invalid user cloud from 106.13.48.122 port 25505
Jul  5 05:54:09 meumeu sshd[538299]: Failed password for invalid user cloud from 106.13.48.122 port 25505 ssh2
Jul  5 05:55:56 meumeu sshd[538334]: Invalid user crb from 106.13.48.122 port 39249
...
2020-07-05 12:46:16
106.13.48.122 attack
Jul  4 03:27:17 PorscheCustomer sshd[13634]: Failed password for root from 106.13.48.122 port 10034 ssh2
Jul  4 03:28:58 PorscheCustomer sshd[13646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122
Jul  4 03:29:00 PorscheCustomer sshd[13646]: Failed password for invalid user vegeta from 106.13.48.122 port 24280 ssh2
...
2020-07-04 10:26:34
106.13.48.122 attackbots
(sshd) Failed SSH login from 106.13.48.122 (CN/China/-): 5 in the last 3600 secs
2020-06-30 14:19:30
106.13.48.122 attackbotsspam
Unauthorized connection attempt detected from IP address 106.13.48.122 to port 1741
2020-06-29 03:37:13
106.13.48.122 attackspambots
 TCP (SYN) 106.13.48.122:44166 -> port 9066, len 44
2020-06-25 19:55:48
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.48.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14721
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.48.157.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080100 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 02 00:29:33 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 157.48.13.106.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 157.48.13.106.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
209.17.96.250 attackbotsspam
Brute force attack stopped by firewall
2019-07-29 09:42:01
115.178.24.72 attackspambots
2019-07-29T01:12:05.283480abusebot-6.cloudsearch.cf sshd\[4877\]: Invalid user 12345y from 115.178.24.72 port 53100
2019-07-29 09:33:30
177.21.131.117 attackbots
SMTP-sasl brute force
...
2019-07-29 09:42:36
46.101.187.115 attackbots
2019/07/28 23:27:10 [error] 1240#1240: *974 FastCGI sent in stderr: "PHP message: [46.101.187.115] user 9had: authentication failure for "https://nihad.dk/wp-admin/": Password Mismatch" while reading response header from upstream, client: 46.101.187.115, server: nihad.dk, request: "POST /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php-fpm-nihad.dk.sock:", host: "nihad.dk"
2019/07/28 23:27:13 [error] 1240#1240: *976 FastCGI sent in stderr: "PHP message: [46.101.187.115] user [login]: authentication failure for "https://nihad.dk/wp-admin/": Password Mismatch" while reading response header from upstream, client: 46.101.187.115, server: nihad.dk, request: "POST /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php-fpm-nihad.dk.sock:", host: "nihad.dk"
...
2019-07-29 09:22:49
77.40.62.86 attackspam
2019-07-29T01:41:16.119349MailD postfix/smtpd[11637]: warning: unknown[77.40.62.86]: SASL LOGIN authentication failed: authentication failure
2019-07-29T02:50:29.966085MailD postfix/smtpd[16630]: warning: unknown[77.40.62.86]: SASL LOGIN authentication failed: authentication failure
2019-07-29T03:31:54.836162MailD postfix/smtpd[19174]: warning: unknown[77.40.62.86]: SASL LOGIN authentication failed: authentication failure
2019-07-29 09:55:00
185.123.220.178 attackspam
SASL Brute Force
2019-07-29 09:45:38
138.97.224.220 attackspam
SMTP-sasl brute force
...
2019-07-29 09:36:48
157.230.43.173 attack
Jul 29 01:55:14 Ubuntu-1404-trusty-64-minimal sshd\[2358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.43.173  user=root
Jul 29 01:55:16 Ubuntu-1404-trusty-64-minimal sshd\[2358\]: Failed password for root from 157.230.43.173 port 32952 ssh2
Jul 29 02:11:25 Ubuntu-1404-trusty-64-minimal sshd\[12192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.43.173  user=root
Jul 29 02:11:27 Ubuntu-1404-trusty-64-minimal sshd\[12192\]: Failed password for root from 157.230.43.173 port 56290 ssh2
Jul 29 02:16:35 Ubuntu-1404-trusty-64-minimal sshd\[13366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.43.173  user=root
2019-07-29 09:52:27
45.76.238.132 attackbots
xmlrpc attack
2019-07-29 09:48:16
46.101.163.220 attackbotsspam
2019-07-28 UTC: 1x - root
2019-07-29 09:50:23
202.148.4.100 attackspam
Caught in portsentry honeypot
2019-07-29 09:34:28
51.38.232.163 attackbotsspam
Jul 29 03:07:43 SilenceServices sshd[6488]: Failed password for root from 51.38.232.163 port 60802 ssh2
Jul 29 03:12:03 SilenceServices sshd[9152]: Failed password for root from 51.38.232.163 port 56322 ssh2
2019-07-29 09:34:02
220.83.143.26 attack
" "
2019-07-29 09:50:56
112.85.42.195 attackbots
2019-07-29T01:32:08.160164abusebot-3.cloudsearch.cf sshd\[18401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
2019-07-29 09:35:21
193.213.152.118 attackbots
Invalid user com from 193.213.152.118 port 54820
2019-07-29 09:23:14

最近上报的IP列表

110.139.179.244 64.16.141.145 16.58.139.115 216.213.137.183
78.31.71.113 62.234.97.45 162.247.104.22 52.53.112.166
213.74.49.241 96.60.209.243 84.21.20.158 106.52.142.17
183.247.132.225 86.36.73.190 201.187.42.169 15.153.255.244
170.78.98.8 109.81.156.70 114.96.62.253 120.161.214.60